
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json)
Hash identifier: Y6IsY35tTJLhz2qmhPxfYFstGrsjXPKH758Sw821vqA=
Subject key identifier: 3D:C8:7C:1A:52:6C:15:30:E0:0E:3C:7B:BE:D7:81:93:53:B6:73:55
Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Certificate serial: 0AC93B4D3CE4D84E11E9DB3A11076BB2A8091692
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:08:07 +0000
Manifest this update: Thu 23 Jul 2026 23:03:07 +0000
Manifest next update: Sat 25 Jul 2026 01:18:07 +0000
Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=)
2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=)
3: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=)
4: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=)
5: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=)
6: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: apI72HQZRkacl3Jyn+ARyE013bvu5qSdhLYnStdCG9g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c9:3b:4d:3c:e4:d8:4e:11:e9:db:3a:11:07:6b:b2:a8:09:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Validity
Not Before: Jul 23 23:03:07 2026 GMT
Not After : Jul 25 01:18:07 2026 GMT
Subject: CN=3DC87C1A526C1530E00E3C7BBED7819353B67355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:58:c5:4f:7b:f1:d1:72:88:30:68:ac:67:
cc:50:ea:3d:29:9b:da:9e:8c:3f:4d:27:36:08:a9:
60:2b:aa:c1:47:ed:d9:1a:28:54:17:c4:ce:cf:01:
f5:ae:ae:22:da:f8:b6:60:ad:9c:0d:65:58:e9:58:
75:d7:ee:51:8d:c9:3f:de:0a:b2:e6:fe:7f:2c:8c:
57:c4:91:0c:ef:a2:68:22:07:8f:c8:5c:e8:23:04:
7b:8f:4f:cc:a7:0b:39:5d:3c:7c:c0:cf:7b:6d:74:
6b:06:9a:98:27:28:ff:db:d4:44:cc:bb:1d:78:fd:
dc:ae:c2:2a:ce:53:40:f7:8d:df:db:d1:55:c2:c8:
30:44:7f:7d:27:b5:cd:16:f2:1f:e3:12:b8:dd:91:
19:68:0f:9c:a1:a7:bc:8a:28:40:81:0e:27:9c:45:
d2:73:80:ff:06:72:20:cc:88:04:8b:f8:4d:00:86:
81:e3:98:ca:b8:22:38:83:e9:e9:5a:08:79:95:35:
66:ce:98:28:8e:30:c5:15:27:27:50:cf:66:e7:7f:
9a:d5:a3:bd:59:c2:ae:a0:88:53:a3:6d:06:70:52:
14:fe:1f:9c:53:70:b7:ba:29:48:2c:83:f8:3a:ce:
9b:58:83:d8:53:f9:2a:e6:f7:89:7d:0c:28:8e:63:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:7C:1A:52:6C:15:30:E0:0E:3C:7B:BE:D7:81:93:53:B6:73:55
X509v3 Authority Key Identifier:
keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d7:a1:18:b2:53:47:2b:34:c3:5e:ff:2f:e6:33:bd:92:7c:
e5:3e:2e:6a:36:8b:58:c8:80:72:98:52:42:16:4d:be:17:8f:
1f:de:84:ca:37:73:06:b3:0b:50:7e:ca:ea:8a:07:ce:76:6d:
3b:3c:1e:39:99:de:e0:29:4f:24:94:4d:70:38:d2:44:34:a1:
04:a8:5e:e4:11:08:56:83:49:7d:f6:dd:3e:23:3f:b6:2a:6f:
45:84:53:28:cc:45:3c:8c:dc:68:0a:a3:d8:81:76:5d:63:e0:
4a:18:4b:bf:8f:0b:c3:ce:54:6f:65:df:af:59:aa:61:25:a4:
dd:4c:64:66:af:ab:fd:c2:53:2b:8c:ff:a3:54:85:c5:42:23:
b0:0a:d5:a3:4e:57:a0:9a:24:37:64:9e:2c:fb:13:da:30:41:
21:fa:04:33:3e:4b:e3:87:8d:a2:29:21:67:11:52:5d:14:88:
c7:d4:98:f0:09:c4:6d:5e:ce:c1:63:ac:de:a2:1d:ed:14:e1:
80:7f:b6:cf:97:26:d0:40:14:29:c4:ee:5b:8c:c5:39:22:a4:
55:64:e6:b1:14:6e:fb:96:db:8f:cd:b3:03:7f:98:b6:4a:ca:
1b:43:18:94:f2:9a:71:41:a5:f3:8d:95:11:1e:42:91:44:be:
c6:77:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:22 2026 by rpki-client